Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/6jVagQn2Kxj34rEl5Rd0hAsPGrc.roa
File: 6jVagQn2Kxj34rEl5Rd0hAsPGrc.roa (raw, json)
Hash identifier: UkLlAbKsK0uS/WqE3uMwfnEUyycqf7A5DbbEv3gWqlQ=
Subject key identifier: EA:35:5A:81:09:F6:2B:18:F7:E2:B1:25:E5:17:74:84:0B:0F:1A:B7
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 018A1C745260D7A5CF62719323663DFD1FEA
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/6jVagQn2Kxj34rEl5Rd0hAsPGrc.roa
Signing time: Tue 22 Aug 2023 08:54:59 +0000
ROA not before: Tue 22 Aug 2023 08:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42705
IP address blocks: 193.186.198.0/24 maxlen: 24
193.186.199.0/24 maxlen: 24
193.186.196.0/22 maxlen: 22
193.186.196.0/24 maxlen: 24
193.186.197.0/24 maxlen: 24
5.11.23.0/24 maxlen: 24
5.11.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:74:52:60:d7:a5:cf:62:71:93:23:66:3d:fd:1f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Aug 22 08:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea355a8109f62b18f7e2b125e51774840b0f1ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:87:2d:e2:63:4d:53:76:4b:ad:92:a5:8f:
74:5a:22:1d:b3:9b:5f:9c:24:a8:bb:f7:e3:91:2f:
87:d5:5a:7f:fb:a5:4d:25:e5:2a:b2:6e:12:54:6c:
cf:6f:5f:5c:c6:25:6a:57:8e:dc:0e:5e:44:36:a1:
d1:29:21:23:33:d0:ae:08:aa:a8:04:ec:ea:22:d9:
ae:17:98:58:18:ae:64:36:ca:d6:2b:34:af:40:a4:
8d:6f:29:76:3a:33:7a:6c:87:e6:e6:78:ed:26:53:
e3:4c:3d:35:bf:49:8e:ff:3e:e9:55:cc:0c:c4:b4:
6d:ff:48:d7:30:b5:a5:83:c8:84:93:f9:f7:8a:5b:
ae:7f:32:fe:1e:f0:c1:62:97:6a:61:d1:22:c2:a2:
86:b7:e0:4e:63:94:93:c0:b1:c0:b6:5e:5f:1d:7b:
d5:0a:23:57:f5:18:e3:06:1f:04:a4:35:10:4d:0e:
b5:e9:ca:fa:4d:bc:37:22:72:35:34:74:b6:0f:c2:
a8:f7:1e:b7:e9:2c:e3:12:c7:77:6c:2e:85:83:70:
72:f3:4c:bf:3c:47:2c:02:2a:8d:6c:35:c5:d6:e9:
94:ac:68:b1:2d:a4:cd:4f:8a:cf:08:e3:91:86:57:
3d:80:d9:92:a4:5b:a5:5e:f3:64:ac:89:1a:fa:7a:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:35:5A:81:09:F6:2B:18:F7:E2:B1:25:E5:17:74:84:0B:0F:1A:B7
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/6jVagQn2Kxj34rEl5Rd0hAsPGrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.20.0/24
5.11.23.0/24
193.186.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:f7:5f:45:5b:3f:54:e5:f9:ce:a2:ed:be:ed:a9:af:88:74:
1b:c9:aa:df:d7:c3:44:3b:67:21:d8:f2:9a:98:00:20:b6:76:
eb:24:e5:59:8a:25:7c:5c:9a:c6:67:bd:d1:68:51:70:6d:b3:
c1:5f:eb:b2:f4:b8:c6:d9:a5:4b:70:6b:9b:73:43:e0:d7:d2:
32:7e:93:ef:9b:88:47:67:cf:dd:38:e6:26:93:c1:63:e6:dc:
50:67:04:e9:a7:9b:77:1c:8c:75:0f:42:b9:31:69:a4:57:7a:
38:2f:0c:20:7f:c1:5a:4c:5e:f7:6c:b1:7f:27:1e:20:e9:ce:
ad:a3:96:df:8a:59:3e:a1:d1:8f:1c:ed:b0:38:5f:8d:0e:0f:
d1:cb:e1:48:3e:5f:a9:79:a3:86:56:cc:e0:a2:90:d7:fd:e0:
05:3e:f8:09:df:32:dc:88:12:f2:f6:cb:62:29:ac:4d:28:13:
f5:cb:54:a2:ed:b3:57:ad:74:78:0f:53:5f:fe:24:5d:94:4c:
90:e2:40:f3:92:49:5a:4a:5b:73:cc:09:d1:1e:30:91:3b:0f:
23:a2:87:7e:e2:c7:08:78:dd:75:f8:bb:e9:eb:26:f6:b7:51:
ae:31:a3:12:5b:02:08:db:1d:4c:30:c6:06:91:20:16:96:5b:
8a:00:8b:e8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYocdFJg16XPYnGTI2Y9/R/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjMwODIyMDg1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTM1NWE4MTA5ZjYyYjE4ZjdlMmIxMjVlNTE3NzQ4NDBiMGYxYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4mHLeJjTVN2S62SpY90WiIds5tf
nCSou/fjkS+H1Vp/+6VNJeUqsm4SVGzPb19cxiVqV47cDl5ENqHRKSEjM9CuCKqo
BOzqItmuF5hYGK5kNsrWKzSvQKSNbyl2OjN6bIfm5njtJlPjTD01v0mO/z7pVcwM
xLRt/0jXMLWlg8iEk/n3iluufzL+HvDBYpdqYdEiwqKGt+BOY5STwLHAtl5fHXvV
CiNX9RjjBh8EpDUQTQ616cr6Tbw3InI1NHS2D8Ko9x636SzjEsd3bC6Fg3By80y/
PEcsAiqNbDXF1umUrGixLaTNT4rPCOORhlc9gNmSpFulXvNkrIka+nrMDwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOo1WoEJ9isY9+KxJeUXdIQLDxq3MB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvNmpWYWdRbjJLeGozNHJFbDVSZDBoQXNQR3JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABQsUAwQA
BQsXAwQCwbrEMA0GCSqGSIb3DQEBCwUAA4IBAQCp919FWz9U5fnOou2+7amviHQb
yarf18NEO2ch2PKamAAgtnbrJOVZiiV8XJrGZ73RaFFwbbPBX+uy9LjG2aVLcGub
c0Pg19IyfpPvm4hHZ8/dOOYmk8Fj5txQZwTpp5t3HIx1D0K5MWmkV3o4Lwwgf8Fa
TF73bLF/Jx4g6c6to5bfilk+odGPHO2wOF+NDg/Ry+FIPl+peaOGVszgopDX/eAF
PvgJ3zLciBLy9stiKaxNKBP1y1Si7bNXrXR4D1Nf/iRdlEyQ4kDzkklaSltzzAnR
HjCROw8jood+4scIeN11+Lvp6yb2t1GuMaMSWwII2x1MMMYGkSAWlluKAIvo
-----END CERTIFICATE-----
Generated at Mon Sep 11 08:40:20 2023 by rpki-client on console-ams.rpki-client.org